← Articles and guides on fraud, cybersecurity, privacy and AML
Virtual cards and alerts: protect your card this Black Friday
Before Black Friday 2026: use virtual cards, real-time alerts and in-app card locks, and know your US liability limits for credit and debit card fraud.
Black Friday falls on November 27, 2026, and fake stores, misleading sponsored links and bogus fraud alerts surge with the deals. Three free settings in your banking app limit the damage if your card number leaks: virtual cards, real-time alerts and a temporary lock.
Why use a virtual card online?
A virtual card is a separate number generated in your bank app for online purchases. Many issuers let you create one per merchant or delete it after use, so a leak or a fake store does not compromise your physical card. Brazil's banking federation Febraban lists virtual cards among its first tips for the season (Febraban tips).
Which alerts should I turn on?
Enable push or text alerts for every transaction, with no minimum. The CFPB advises checking transactions often, including small amounts, because thieves sometimes test a card with a small charge first. Beware of fake alerts: if a text or call reports a purchase you did not make, check in the app and call the number on the back of your card, never the one in the message.
| Setting | Why |
|---|---|
| Virtual card | Separates online purchases from your physical card |
| Transaction alerts | Show every charge instantly |
| Temporary lock | Freezes the card in seconds |
| Turn off unused features | Fewer ways to misuse the card |
How do I spot a safe store and payment?
Febraban's seasonal advice also applies anywhere: prefer well-known stores and check unfamiliar ones on complaint sites; use protected checkout, where the platform holds the money until you confirm delivery; distrust prices far below normal and sponsored links; type the store address yourself; and remember large companies do not send offers from free webmail accounts. In physical stores, check the amount on the card machine before entering your PIN and insert the card yourself (Viva).
Am I liable for fraudulent charges in the US?
For credit cards, you owe nothing if you report before the card is used, at most $50 after that, and generally nothing if only the number was stolen, according to the CFPB. For debit cards, report a lost card within 2 business days to cap liability at $50, and dispute unauthorized statement charges within 60 days (CFPB). That is why credit, or a virtual credit card, is usually safer for online shopping.
What to do
- Create a virtual card for holiday shopping and delete it afterwards.
- Turn on alerts for all transactions and learn where the lock button is.
- Unknown charge? Lock the card, dispute it, get a new one.
- Shop at known stores and distrust prices that look too good.
See how to check if a site is legit, fake online stores and more tips.
Source
- Conexão Tocantins: Febraban dá dicas antifraude para o Esquenta Black Friday (2025)
- Viva: Black Friday, dicas contra fraudes da Febraban
- CFPB: Am I responsible for charges on a lost or stolen credit card?
- CFPB consumer advisory: card security